
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
File: XqEcijop4GlzwfEhYR1aXCobBp0.mft (raw, json)
Hash identifier: GNTbJLthzt5KXZVdifkIzqyei+N/zuOg/q8pgiBlFNo=
Subject key identifier: 19:58:5E:0D:76:28:74:3C:93:4C:D1:0F:BB:A2:08:92:46:25:8E:CB
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial: 083E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
Manifest number: 07FD
Signing time: Wed 22 Jul 2026 21:55:26 +0000
Manifest this update: Wed 22 Jul 2026 21:55:26 +0000
Manifest next update: Wed 29 Jul 2026 21:55:26 +0000
Files and hashes: 1: XqEcijop4GlzwfEhYR1aXCobBp0.crl (hash: PP2yXceJZyO6/0L+IybQfW4gZbTnFsZ7Hvs9HlpbihU=)
2: 9507206A63A111F092E32646C4F9AE02.roa (hash: zbwsIMflxwphg5gU9UqOZAbwNHUfzLTXefSGHx8E9Ms=)
3: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (hash: 07OvimTtnDe97y43gOmhP2mYLb6FKJ2TL30DbKiYSdk=)
4: 66FC64186D0711F0AC1BE951C4F9AE02.roa (hash: gVwWJAGwFMN8FtAbSFBX/YkFLx2iObisxi/ECzC4Gms=)
5: 0940732E0E6311EDB98DEA0DC4F9AE02.roa (hash: fd8kDW52Sq9cJKEJvqYfssXk1O68wOynpHR8qW9FwDo=)
6: 94A5320663A111F092E32646C4F9AE02.roa (hash: sIgCJcq0Zl47ilkYoj6SY92FU+t+igEFIIfzQQa1AGM=)
7: 0A37FEFA0E6311EDB98DEA0DC4F9AE02.roa (hash: 2PM2q9cUg2P0NzsrCEQgTadgMBgcus+n4gLLyMzQ2+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Validity
Not Before: Jul 22 21:55:26 2026 GMT
Not After : Jul 29 21:55:26 2026 GMT
Subject: CN=6a613c4e-9034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:b7:07:dd:92:4a:0f:6b:77:5f:53:66:77:
c5:69:5e:2f:00:1a:80:76:c1:f8:2f:b5:d9:d2:1e:
f4:fa:3b:f6:bc:11:0c:d1:39:26:67:8a:ee:81:8e:
32:79:6d:22:96:78:0d:17:5b:86:6d:9d:6d:5d:5f:
d3:2a:c2:84:bf:04:f3:db:c7:56:dc:cc:fc:49:cc:
a1:eb:9e:59:ee:3f:d9:f5:7b:f2:ef:cb:06:6b:61:
75:f8:f3:b1:9b:32:81:89:89:6c:2e:ef:b7:4f:f1:
7d:b3:e0:23:74:b9:35:5c:03:93:1f:1b:36:7f:0f:
05:e7:8d:04:5b:fb:cf:59:9d:0c:0f:0e:99:0a:3a:
71:05:d0:01:b1:21:71:12:35:a8:b0:ae:be:81:60:
12:f0:bf:fd:6a:23:d6:de:39:a4:d0:24:c9:6c:ff:
9f:27:05:d7:9d:4b:2f:b7:81:9a:01:a9:13:74:d5:
18:db:53:4e:fe:fc:2d:d4:12:13:74:24:7c:28:2c:
aa:3f:70:e0:5c:96:d2:3d:d5:c9:96:56:7a:2e:a8:
5e:29:a3:fe:bb:4a:f2:90:75:3d:7a:50:9f:dc:29:
d8:12:3b:63:d7:2c:e5:db:09:b7:f0:2e:d0:35:5d:
4c:53:59:49:44:e9:d3:37:08:5f:2b:5d:1d:b0:7f:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:58:5E:0D:76:28:74:3C:93:4C:D1:0F:BB:A2:08:92:46:25:8E:CB
X509v3 Authority Key Identifier:
keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f5:48:76:d2:6b:ae:28:61:60:aa:f8:0e:68:81:13:b9:5a:
42:a5:ee:d0:61:3a:fe:70:c6:bf:08:08:5d:af:78:68:f4:39:
16:6a:12:c2:e7:82:c2:df:e5:40:e1:da:16:d7:eb:c0:fd:97:
ba:a2:82:15:48:75:be:b2:9a:93:57:bd:fe:ad:2a:7c:b9:10:
c5:b4:8e:d1:18:84:fe:10:ce:48:0d:63:11:a3:f4:b4:fc:9d:
f3:ac:31:f3:15:73:e5:7e:d0:e6:bb:12:50:6a:90:c5:77:a4:
9e:de:9b:b7:99:ab:42:10:69:43:3d:d8:f3:56:41:f6:ac:e2:
e6:e1:1c:65:7c:60:8c:35:fa:0e:e5:08:a7:34:1c:46:2a:7f:
c4:0d:c3:c3:88:d1:6c:06:0a:88:d1:79:33:72:1d:83:6c:e0:
dd:48:8b:25:ce:fe:d5:72:5a:d6:2b:22:e0:fb:8e:83:df:64:
c9:5f:a6:24:d0:9a:20:d9:e3:26:c9:44:66:bf:18:86:8a:73:
50:8d:78:b6:57:c4:46:65:09:40:e4:e9:58:48:a3:5a:c3:30:
d1:73:7a:a1:96:57:58:f4:98:33:ef:1a:94:22:61:60:0a:67:
8d:6c:38:b8:e8:9b:11:9c:89:d1:88:ae:fe:05:cf:f0:99:b3:
a4:6d:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:11 2026 by rpki-client